d031c0a9185494ba411855b7d2e67c47a6d57865da0e122706962423bb1fff35

Sharing

Copy URL Twitter E-mail

General

Target

d031c0a9185494ba411855b7d2e67c47a6d57865da0e122706962423bb1fff35
Size

1.4MB
MD5

12a95682fea4c5ce3b22d12e1d117e14
SHA1

3bb81aa6a172cbced2cabe6ac713b4a46c17d6eb
SHA256

d031c0a9185494ba411855b7d2e67c47a6d57865da0e122706962423bb1fff35
SHA512

abbd9ed50ca289ea1d8d898f9f4ff4149df950e7cde8dd44d277cca5a7df68e451c24954cb1492c298ea9da7b2a821b28108750c2a17e4d3d6e180dd19ac2d85
SSDEEP

24576:Rmq0JlaFa18jphQf9SiVgT8n1ZNhoYBo1A1dOMvVn1U0Fm7hpVkJ7AtmbuAcJMs:YFGaopISygTChoY3blCVjtkNcJMs

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Apex Explorer New 1.3.2.2/ApexExplorerNew.exe
unpack001/Apex Explorer New 1.3.2.2/SciLexer.dll
unpack001/Apex Explorer New 1.3.2.2/SciLexer64.dll
unpack001/Apex Explorer New 1.3.2.2/ScintillaNet.dll

Files

d031c0a9185494ba411855b7d2e67c47a6d57865da0e122706962423bb1fff35
.zip
Apex Explorer New 1.3.2.2/ApexExplorerNew.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 536KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Apex Explorer New 1.3.2.2/ApexExplorerNew.exe.config
.xml
Apex Explorer New 1.3.2.2/ApexExplorerNew.pdb
Apex Explorer New 1.3.2.2/ApexExplorerNew.vshost.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:00:70:f4:18:bf:23:21:fc:50:9d:00:00:00:00:00:70
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

20/03/2015, 17:32

Not After

20/06/2016, 17:32

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/06/2015, 17:42

Not After

04/09/2016, 17:42

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:38:8d:23:6d:16:27:a3:26:e0:00:00:00:00:00:38
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/10/2014, 18:11

Not After

01/01/2016, 18:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a5:e6:52:d6:dd:2c:c8:8c:44:ef:9d:c6:2d:d4:7c:ad:d9:fb:9c:a4:65:50:cd:d3:1e:d5:f3:1e:06:3d:c1:d2
Signer

Actual PE Digest

a5:e6:52:d6:dd:2c:c8:8c:44:ef:9d:c6:2d:d4:7c:ad:d9:fb:9c:a4:65:50:cd:d3:1e:d5:f3:1e:06:3d:c1:d2

Digest Algorithm

sha256

PE Digest Matches

true

02:ee:13:28:e6:01:69:6f:e5:72:19:59:cb:88:5c:98:97:c3:d0:47
Signer

Actual PE Digest

02:ee:13:28:e6:01:69:6f:e5:72:19:59:cb:88:5c:98:97:c3:d0:47

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Apex Explorer New 1.3.2.2/ApexExplorerNew.vshost.exe.config
.xml
Apex Explorer New 1.3.2.2/Release note.txt
Apex Explorer New 1.3.2.2/SciLexer.dll
.dll windows:5 windows x86 arch:x86

f97475c4f2157fd538dd147713c54feb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetModuleFileNameW
GetStdHandle
WriteFile
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetOEMCP
InterlockedDecrement
GetEnvironmentStringsW
ExitProcess
GetModuleHandleW
HeapSize
Sleep
IsProcessorFeaturePresent
RaiseException
HeapAlloc
HeapFree
GetLastError
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCommandLineA
GetCurrentThreadId
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
HeapCreate
HeapDestroy
HeapReAlloc
GetCurrentProcessId
RtlUnwind
LoadLibraryW
GetStringTypeW
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
ReadFile
CreateFileW
CloseHandle
LCMapStringW
GlobalFree
IsValidCodePage
FreeLibrary
GlobalUnlock
WideCharToMultiByte
GlobalAlloc
GetTickCount
GlobalLock
GlobalSize
GetCPInfo
GetLocaleInfoA
GetVersionExA
DeleteCriticalSection
QueryPerformanceFrequency
GetModuleHandleA
LoadLibraryA
EnterCriticalSection
GetProcAddress
IsDBCSLeadByteEx
MultiByteToWideChar
GetACP
MulDiv
LeaveCriticalSection
InitializeCriticalSection
QueryPerformanceCounter
InterlockedIncrement
FlushFileBuffers

user32

CloseClipboard
GetUpdateRgn
SetTimer
HideCaret
ScreenToClient
IsChild
KillTimer
MsgWaitForMultipleObjects
IsClipboardFormatAvailable
SetFocus
ShowCaret
RegisterClassExW
GetKeyboardLayout
RegisterClipboardFormatA
GetScrollInfo
GetClipboardData
EmptyClipboard
IsWindowUnicode
DestroyCaret
AppendMenuA
LoadCursorA
DestroyMenu
CallWindowProcA
MapWindowPoints
GetSystemMetrics
CreateCaret
PostMessageA
OpenClipboard
SetCaretPos
SetClipboardData
GetDlgCtrlID
GetCaretBlinkTime
SetScrollInfo
GetMessageTime
EndPaint
ClientToScreen
DestroyWindow
SetCursor
GetWindowRect
RegisterClassExA
TrackPopupMenu
FillRect
SetCapture
DrawTextW
DrawTextA
GetKeyState
GetParent
GetClientRect
SendMessageA
BeginPaint
GetDoubleClickTime
CreateIconIndirect
GetIconInfo
GetDC
DrawFocusRect
InflateRect
SetWindowLongA
InvalidateRect
UnregisterClassA
GetWindowLongA
CreateWindowExA
ReleaseDC
DefWindowProcA
DestroyCursor
GetSysColor
SetWindowPos
GetCursorPos
ShowWindow
CreatePopupMenu
FrameRect
AdjustWindowRectEx
SystemParametersInfoA
ReleaseCapture

gdi32

GetObjectA
GetDeviceCaps
StretchBlt
CreateFontIndirectA
SetBkColor
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
ExtTextOutW
Ellipse
GetObjectW
GetTextExtentExPointW
GetTextExtentExPointA
GetNearestColor
CreatePatternBrush
CreatePen
GetTextMetricsA
RoundRect
SetTextAlign
IntersectClipRect
GetStockObject
ExtTextOutA
CreateSolidBrush
CreateDIBSection
Polygon
DeleteDC
SetTextColor
LineTo
GetTextExtentPoint32A
GetTextExtentPoint32W
BitBlt
MoveToEx
CreateRectRgn
CombineRgn
CreateBitmap
TranslateCharsetInfo
CreateFontIndirectW

imm32

ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext
ImmGetCompositionStringW
ImmNotifyIME
ImmSetCompositionFontA

ole32

DoDragDrop
OleUninitialize
OleInitialize
RevokeDragDrop
RegisterDragDrop

Exports

Exports

Scintilla_DirectFunction

Sections

.text
Size: 536KB - Virtual size: 536KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Apex Explorer New 1.3.2.2/SciLexer64.dll
.dll windows:5 windows x64 arch:x64

ef9a0e2024bedfcb57e1f9d5bbef2b11

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetModuleFileNameW
GetStdHandle
WriteFile
FlsAlloc
SetLastError
FlsFree
FlsGetValue
GetOEMCP
RtlUnwindEx
ExitProcess
GetModuleHandleW
GetEnvironmentStringsW
Sleep
RtlPcToFileHeader
RaiseException
HeapAlloc
HeapFree
GetLastError
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCommandLineA
FlsSetValue
GetCurrentThreadId
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetCurrentProcessId
HeapReAlloc
LoadLibraryW
GetStringTypeW
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
ReadFile
CreateFileW
CloseHandle
LCMapStringW
GlobalFree
IsValidCodePage
FreeLibrary
GlobalUnlock
WideCharToMultiByte
GlobalAlloc
GetTickCount
GlobalLock
GlobalSize
GetCPInfo
GetLocaleInfoA
GetVersionExA
DeleteCriticalSection
QueryPerformanceFrequency
GetModuleHandleA
LoadLibraryA
EnterCriticalSection
GetProcAddress
IsDBCSLeadByteEx
MultiByteToWideChar
GetACP
MulDiv
LeaveCriticalSection
InitializeCriticalSection
QueryPerformanceCounter
HeapSize
FlushFileBuffers

user32

CloseClipboard
GetUpdateRgn
SetTimer
HideCaret
ScreenToClient
IsChild
KillTimer
MsgWaitForMultipleObjects
IsClipboardFormatAvailable
SetFocus
ShowCaret
RegisterClassExW
GetKeyboardLayout
RegisterClipboardFormatA
GetScrollInfo
GetClipboardData
EmptyClipboard
IsWindowUnicode
DestroyCaret
AppendMenuA
LoadCursorA
DestroyMenu
CallWindowProcA
MapWindowPoints
GetSystemMetrics
CreateCaret
PostMessageA
OpenClipboard
SetCaretPos
SetClipboardData
GetDlgCtrlID
GetCaretBlinkTime
SetScrollInfo
GetMessageTime
EndPaint
ClientToScreen
DestroyWindow
SetCursor
GetWindowRect
GetWindowLongPtrA
RegisterClassExA
TrackPopupMenu
FillRect
SetCapture
DrawTextW
DrawTextA
GetKeyState
GetParent
GetClientRect
SendMessageA
BeginPaint
GetDoubleClickTime
CreateIconIndirect
GetIconInfo
GetDC
DrawFocusRect
InflateRect
SetWindowLongA
InvalidateRect
UnregisterClassA
GetWindowLongA
CreateWindowExA
ReleaseDC
DefWindowProcA
DestroyCursor
GetSysColor
SetWindowPos
GetCursorPos
ShowWindow
CreatePopupMenu
FrameRect
SetWindowLongPtrA
AdjustWindowRectEx
SystemParametersInfoA
ReleaseCapture

gdi32

GetObjectA
GetDeviceCaps
StretchBlt
CreateFontIndirectA
SetBkColor
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
ExtTextOutW
Ellipse
GetObjectW
GetTextExtentExPointW
GetTextExtentExPointA
GetNearestColor
CreatePatternBrush
CreatePen
GetTextMetricsA
RoundRect
SetTextAlign
IntersectClipRect
GetStockObject
ExtTextOutA
CreateSolidBrush
CreateDIBSection
Polygon
DeleteDC
SetTextColor
LineTo
GetTextExtentPoint32A
GetTextExtentPoint32W
BitBlt
MoveToEx
CreateRectRgn
CombineRgn
CreateBitmap
TranslateCharsetInfo
CreateFontIndirectW

imm32

ImmNotifyIME
ImmGetContext
ImmReleaseContext
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmSetCompositionFontA

ole32

DoDragDrop
OleUninitialize
OleInitialize
RevokeDragDrop
RegisterDragDrop

Exports

Exports

Scintilla_DirectFunction

Sections

.text
Size: 739KB - Virtual size: 738KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Apex Explorer New 1.3.2.2/ScintillaNet.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 572KB - Virtual size: 571KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Apex Explorer New 1.3.2.2/app.log

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 536KB - Virtual size: 532KB

.rsrc Size: 8KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:00:70:f4:18:bf:23:21:fc:50:9d:00:00:00:00:00:70Certificate

Extended Key Usages

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate

Extended Key Usages

61:33:26:1a:00:00:00:00:00:31Certificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

33:00:00:00:38:8d:23:6d:16:27:a3:26:e0:00:00:00:00:00:38Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

a5:e6:52:d6:dd:2c:c8:8c:44:ef:9d:c6:2d:d4:7c:ad:d9:fb:9c:a4:65:50:cd:d3:1e:d5:f3:1e:06:3d:c1:d2Signer

02:ee:13:28:e6:01:69:6f:e5:72:19:59:cb:88:5c:98:97:c3:d0:47Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 4KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

f97475c4f2157fd538dd147713c54feb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

imm32

ole32

Exports

Exports

Sections

.text Size: 536KB - Virtual size: 536KB

.rdata Size: 56KB - Virtual size: 56KB

.data Size: 13KB - Virtual size: 20KB

.rsrc Size: 1024B - Virtual size: 920B

.reloc Size: 25KB - Virtual size: 25KB

ef9a0e2024bedfcb57e1f9d5bbef2b11

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

imm32

ole32

Exports

Exports

Sections

.text Size: 739KB - Virtual size: 738KB

.rdata Size: 103KB - Virtual size: 102KB

.data Size: 18KB - Virtual size: 27KB

.pdata Size: 18KB - Virtual size: 18KB

.rsrc Size: 1024B - Virtual size: 920B

.reloc Size: 6KB - Virtual size: 6KB

dae02f32a21e03ce65412f6e56942daa

Headers

.text
Size: 536KB - Virtual size: 532KB

.rsrc
Size: 8KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 12B

33:00:00:00:70:f4:18:bf:23:21:fc:50:9d:00:00:00:00:00:70
Certificate

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:00:38:8d:23:6d:16:27:a3:26:e0:00:00:00:00:00:38
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

a5:e6:52:d6:dd:2c:c8:8c:44:ef:9d:c6:2d:d4:7c:ad:d9:fb:9c:a4:65:50:cd:d3:1e:d5:f3:1e:06:3d:c1:d2
Signer

02:ee:13:28:e6:01:69:6f:e5:72:19:59:cb:88:5c:98:97:c3:d0:47
Signer

.text
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 536KB - Virtual size: 536KB

.rdata
Size: 56KB - Virtual size: 56KB

.data
Size: 13KB - Virtual size: 20KB

.rsrc
Size: 1024B - Virtual size: 920B

.reloc
Size: 25KB - Virtual size: 25KB

.text
Size: 739KB - Virtual size: 738KB

.rdata
Size: 103KB - Virtual size: 102KB

.data
Size: 18KB - Virtual size: 27KB

.pdata
Size: 18KB - Virtual size: 18KB

.rsrc
Size: 1024B - Virtual size: 920B

.reloc
Size: 6KB - Virtual size: 6KB

.text
Size: 572KB - Virtual size: 571KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B